Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67879492C1A011EF86515C53762E951A.roa
File: 67879492C1A011EF86515C53762E951A.roa (raw, json)
Hash identifier: 7JdASdxJgM0IccffAJ9ox2TqefcdYAW7RsiXKbrO9KQ=
Subject key identifier: B6:62:87:2C:8E:5C:D5:20:9D:5A:5A:74:28:0F:FB:36:25:54:D9:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67879492C1A011EF86515C53762E951A.roa
Signing time: Tue 24 Dec 2024 02:40:15 +0000
ROA not before: Tue 24 Dec 2024 02:40:11 +0000
ROA not after: Wed 10 Dec 2025 02:40:11 +0000
asID: 984
IP address blocks: 154.90.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73899 (0x120ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:40:11 2024 GMT
Not After : Dec 10 02:40:11 2025 GMT
Subject: CN=676a1f0f-8829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:30:d4:df:36:45:2b:20:7b:e5:f1:3b:fc:7c:
0a:ea:76:74:a0:f1:8a:9f:b6:3f:0e:81:80:3d:81:
8b:db:df:f7:83:2a:09:5c:42:1c:aa:bb:d9:78:1f:
05:68:09:b9:04:7f:a4:44:50:1f:58:20:5c:07:c7:
ce:8b:15:b0:7e:c7:65:2a:54:fb:d7:01:e4:48:dc:
64:5c:05:03:b7:2c:8c:af:1c:09:5d:74:99:6b:02:
32:f9:b4:5e:ec:07:7a:a5:22:f5:af:43:ca:02:27:
40:44:f6:de:30:e8:21:f5:13:ae:52:fb:79:c2:a5:
ee:21:01:1d:18:9e:25:35:58:0e:c7:81:ce:cf:d9:
77:de:2a:7d:3a:f6:2c:fe:51:5b:f1:4f:d6:00:68:
b5:ad:8f:59:92:17:3b:8f:a2:89:75:43:2b:a9:39:
d7:46:57:1d:f2:13:4e:23:47:7e:d3:d2:ec:5e:34:
b1:18:e4:85:5c:2d:7c:de:45:3b:18:e0:e9:91:bc:
63:f3:5a:01:14:cf:fd:9c:97:94:25:9c:34:df:d3:
b3:b3:0a:8c:55:ae:b9:49:99:7e:e4:15:fb:1b:c6:
07:f1:f3:2c:c0:5e:a9:0a:cb:5b:5d:79:b0:85:50:
e2:f7:92:07:a3:8a:d4:9d:7a:50:67:ba:4a:38:62:
b3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:87:2C:8E:5C:D5:20:9D:5A:5A:74:28:0F:FB:36:25:54:D9:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67879492C1A011EF86515C53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.241.0/24
Signature Algorithm: sha256WithRSAEncryption
83:94:06:be:44:9f:52:28:26:c8:99:68:ea:8c:94:21:bb:99:
b4:71:ab:e2:c4:e9:71:e4:fa:7e:b8:a3:42:5c:76:e0:6b:31:
ee:e8:fc:f8:21:c9:15:10:25:cb:9c:29:6e:da:99:09:57:1e:
03:30:9c:88:4b:dc:04:2d:d2:fb:7c:43:fb:98:82:77:e9:14:
26:f8:7a:ab:9a:15:55:22:9a:83:f6:44:1b:03:38:be:ca:54:
6d:eb:d1:e3:16:b7:cc:33:68:84:5a:76:6d:d1:dc:6e:c4:5e:
f3:95:2c:d0:fd:9c:88:11:08:4e:47:f6:db:0e:9c:81:0f:34:
79:8f:b2:08:28:b2:1e:e1:3a:18:23:b9:c6:8a:6c:4b:96:8b:
e1:97:43:f9:88:37:fa:49:26:d0:bf:8e:ed:f8:b6:7a:3b:53:
b0:ab:d1:6f:96:e5:c9:c6:b7:b8:8f:38:f1:13:db:47:97:86:
0a:7e:13:14:63:e8:9a:42:9d:16:40:97:7c:93:3a:74:4f:88:
ab:72:79:4c:e3:2b:2f:c3:c9:53:cc:49:35:2a:aa:1f:15:28:
45:4e:8e:bb:7f:28:0b:d3:67:15:ce:77:e7:74:c6:1e:0f:4e:
16:96:f4:ee:38:14:92:51:c2:6e:43:85:1d:f8:ff:a5:65:31:
ed:e7:43:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:23:06 2025 by rpki-client